SRX

Hi All,

Does anyone have a working example of SRX345 using 1000Base-LX optics to Cisco 9200L switch with 1000Base-LX ? 

We have an issue with our SRX345 cluster where we had 2x 1000Base-LX interfaces towards a customer's 2x Cisco 3750 stack with Cisco 1000Base-LX optics. 

This configuration was working absolutely fine, until the customer replaced their switches with 2x Cisco C9200L-24T-4X running 17.09.04a  CAT9K_LITE_IOSXE

After reconnecting the optics, the customers Cisco SFP interfaces showed the link as UP on their side, however the SRX continues to see the interfaces as DOWN. 

Confirm we receive optical light power from the Cisco SFP, and if customer shuts down their SFP we see the optical light power drop off. Similarly if we shut our SFP, the customers SFP interface goes down, so it's not a patching issue, and keep in mind this exact link and patching was working fine, it was only an issue after the customer Cisco switches were replaced with newer model. 

Have been working through with JTAC and the suggestion from them was to ensure the customers Cisco interfaces have "speed nonegotiate" and "switchport nonegotiate" set which they do. We have similarly tried setting no-auto-negotiation on our SRX interfaces, and our side still refuses to come up, while the Cisco side is happily showing as UP and that they are sending bytes to us but not receiving any bytes back. 

I'm at a complete loss on this as to why we can't interface directly - I've tried different JunOS releases on the SRX with no difference. At the moment I have the main links back in production by sitting 2x EX2300-C-12P's in between each fibre link to act as an expensive managed SFP-to-SFP media converter, but it would be far more preferable to have the direct links working again so that the SRX345 cluster will failover between interfaces properly, as currently if the active interface were to fail between the Cisco and 2300-C the SRX on our side won't see that due to the 2300-C <-> SRX interface still being online. 

I currently have a testlab SRX345 using the Genuine Juniper SFP-1G-LX-C Part Number: 740-011614 optic towards the customers Cisco on a spare SFP port using a Genuine Cisco GLC-LH-SM 1000Base-LX optic. 

Does anyone know if there's any technical difference with the Device Specific Juniper optic "EX-SFP-1GE-LX Part Number: 740-011614 Small Form Factor Pluggable 1000Base-LX Gigabit Ethernet Optics" compared to the Common optic SFP-1G-LX-C Part Number: 740-011614 ?

Or whether there is some other optic that would be compatible, or could it genuinely be an issue with the Customer side optics in their switch as they are still using the original Cisco GLC-LH-SM modules which are quite old now.

Thanks

In these link speed configurations with Cisco in addition to setting no negotiate, we also had to explicitly configure speed 1g and duplex full for the link to come up.

Hi All,

Does anyone have a working example of SRX345 using 1000Base-LX optics to Cisco 9200L switch with 1000Base-LX ? 

We have an issue with our SRX345 cluster where we had 2x 1000Base-LX interfaces towards a customer's 2x Cisco 3750 stack with Cisco 1000Base-LX optics. 

This configuration was working absolutely fine, until the customer replaced their switches with 2x Cisco C9200L-24T-4X running 17.09.04a  CAT9K_LITE_IOSXE

After reconnecting the optics, the customers Cisco SFP interfaces showed the link as UP on their side, however the SRX continues to see the interfaces as DOWN. 

Confirm we receive optical light power from the Cisco SFP, and if customer shuts down their SFP we see the optical light power drop off. Similarly if we shut our SFP, the customers SFP interface goes down, so it's not a patching issue, and keep in mind this exact link and patching was working fine, it was only an issue after the customer Cisco switches were replaced with newer model. 

Have been working through with JTAC and the suggestion from them was to ensure the customers Cisco interfaces have "speed nonegotiate" and "switchport nonegotiate" set which they do. We have similarly tried setting no-auto-negotiation on our SRX interfaces, and our side still refuses to come up, while the Cisco side is happily showing as UP and that they are sending bytes to us but not receiving any bytes back. 

I'm at a complete loss on this as to why we can't interface directly - I've tried different JunOS releases on the SRX with no difference. At the moment I have the main links back in production by sitting 2x EX2300-C-12P's in between each fibre link to act as an expensive managed SFP-to-SFP media converter, but it would be far more preferable to have the direct links working again so that the SRX345 cluster will failover between interfaces properly, as currently if the active interface were to fail between the Cisco and 2300-C the SRX on our side won't see that due to the 2300-C <-> SRX interface still being online. 

I currently have a testlab SRX345 using the Genuine Juniper SFP-1G-LX-C Part Number: 740-011614 optic towards the customers Cisco on a spare SFP port using a Genuine Cisco GLC-LH-SM 1000Base-LX optic. 

Does anyone know if there's any technical difference with the Device Specific Juniper optic "EX-SFP-1GE-LX Part Number: 740-011614 Small Form Factor Pluggable 1000Base-LX Gigabit Ethernet Optics" compared to the Common optic SFP-1G-LX-C Part Number: 740-011614 ?

Or whether there is some other optic that would be compatible, or could it genuinely be an issue with the Customer side optics in their switch as they are still using the original Cisco GLC-LH-SM modules which are quite old now.

Thanks

Hi Steve,

Thanks we have defined speed 1g and link full-duplex already as well with no success, all the options set below.

When I went to look at the SRX yesterday I was surprised to see the LED's above the SFP were lit up, with activity light blinking - however JunOS still told me the link was in a down state. 

I then swapped around some optics in the SRX and took out the genuine SFP and inserted another Cisco GLC-LH-SM module and the link came up!

It still has me thoroughly confused however that the combination of Cisco GLC-LH SM module in a Cisco 3750 was working just fine with our existing optics, and then changing over to the Cisco 9200L resulted in it not working anymore, yet putting a Cisco module in the Juniper did get it to come up.

set interfaces ge-0/0/8 speed 1g
set interfaces ge-0/0/8 link-mode full-duplex
set interfaces ge-0/0/8 ether-options no-auto-negotiation
set interfaces ge-0/0/8 ether-options no-flow-control

Original Message:
Sent: 08-15-2024 19:33
From: spuluka
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

In these link speed configurations with Cisco in addition to setting no negotiate, we also had to explicitly configure speed 1g and duplex full for the link to come up.

------------------------------
Steve Puluka BSEET - Juniper Ambassador
IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP - Retired)
http://puluka.com/home

Original Message:
Sent: 08-14-2024 21:56
From: ChrisLee
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Hi All,

Does anyone have a working example of SRX345 using 1000Base-LX optics to Cisco 9200L switch with 1000Base-LX ? 

We have an issue with our SRX345 cluster where we had 2x 1000Base-LX interfaces towards a customer's 2x Cisco 3750 stack with Cisco 1000Base-LX optics. 

This configuration was working absolutely fine, until the customer replaced their switches with 2x Cisco C9200L-24T-4X running 17.09.04a  CAT9K_LITE_IOSXE

After reconnecting the optics, the customers Cisco SFP interfaces showed the link as UP on their side, however the SRX continues to see the interfaces as DOWN. 

Confirm we receive optical light power from the Cisco SFP, and if customer shuts down their SFP we see the optical light power drop off. Similarly if we shut our SFP, the customers SFP interface goes down, so it's not a patching issue, and keep in mind this exact link and patching was working fine, it was only an issue after the customer Cisco switches were replaced with newer model. 

Have been working through with JTAC and the suggestion from them was to ensure the customers Cisco interfaces have "speed nonegotiate" and "switchport nonegotiate" set which they do. We have similarly tried setting no-auto-negotiation on our SRX interfaces, and our side still refuses to come up, while the Cisco side is happily showing as UP and that they are sending bytes to us but not receiving any bytes back. 

I'm at a complete loss on this as to why we can't interface directly - I've tried different JunOS releases on the SRX with no difference. At the moment I have the main links back in production by sitting 2x EX2300-C-12P's in between each fibre link to act as an expensive managed SFP-to-SFP media converter, but it would be far more preferable to have the direct links working again so that the SRX345 cluster will failover between interfaces properly, as currently if the active interface were to fail between the Cisco and 2300-C the SRX on our side won't see that due to the 2300-C <-> SRX interface still being online. 

I currently have a testlab SRX345 using the Genuine Juniper SFP-1G-LX-C Part Number: 740-011614 optic towards the customers Cisco on a spare SFP port using a Genuine Cisco GLC-LH-SM 1000Base-LX optic. 

Does anyone know if there's any technical difference with the Device Specific Juniper optic "EX-SFP-1GE-LX Part Number: 740-011614 Small Form Factor Pluggable 1000Base-LX Gigabit Ethernet Optics" compared to the Common optic SFP-1G-LX-C Part Number: 740-011614 ?

Or whether there is some other optic that would be compatible, or could it genuinely be an issue with the Customer side optics in their switch as they are still using the original Cisco GLC-LH-SM modules which are quite old now.

Thanks

Don't get me started on this subject! I spent months doing the run around with this one. In the end, both devices needed a particular firmware and manual speed settings defined. I had the exact same issues and experiences as yourself. Currently, all is well, but as to 'who' is to blame, I can't answer that one. As you found, the SRX works fine with other kit, even Cisco, just not the 9200L specifically.  The Junos version required is 22.2R3-S3.18 (or above I presume).

Original Message:
Sent: 08-15-2024 19:54
From: ChrisLee
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Hi Steve,

Thanks we have defined speed 1g and link full-duplex already as well with no success, all the options set below.

When I went to look at the SRX yesterday I was surprised to see the LED's above the SFP were lit up, with activity light blinking - however JunOS still told me the link was in a down state. 

I then swapped around some optics in the SRX and took out the genuine SFP and inserted another Cisco GLC-LH-SM module and the link came up!

It still has me thoroughly confused however that the combination of Cisco GLC-LH SM module in a Cisco 3750 was working just fine with our existing optics, and then changing over to the Cisco 9200L resulted in it not working anymore, yet putting a Cisco module in the Juniper did get it to come up.

set interfaces ge-0/0/8 speed 1g
set interfaces ge-0/0/8 link-mode full-duplex
set interfaces ge-0/0/8 ether-options no-auto-negotiation
set interfaces ge-0/0/8 ether-options no-flow-control

Original Message:
Sent: 08-15-2024 19:33
From: spuluka
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

In these link speed configurations with Cisco in addition to setting no negotiate, we also had to explicitly configure speed 1g and duplex full for the link to come up.

------------------------------
Steve Puluka BSEET - Juniper Ambassador
IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP - Retired)
http://puluka.com/home

Original Message:
Sent: 08-14-2024 21:56
From: ChrisLee
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Hi All,

Does anyone have a working example of SRX345 using 1000Base-LX optics to Cisco 9200L switch with 1000Base-LX ? 

We have an issue with our SRX345 cluster where we had 2x 1000Base-LX interfaces towards a customer's 2x Cisco 3750 stack with Cisco 1000Base-LX optics. 

This configuration was working absolutely fine, until the customer replaced their switches with 2x Cisco C9200L-24T-4X running 17.09.04a  CAT9K_LITE_IOSXE

After reconnecting the optics, the customers Cisco SFP interfaces showed the link as UP on their side, however the SRX continues to see the interfaces as DOWN. 

Confirm we receive optical light power from the Cisco SFP, and if customer shuts down their SFP we see the optical light power drop off. Similarly if we shut our SFP, the customers SFP interface goes down, so it's not a patching issue, and keep in mind this exact link and patching was working fine, it was only an issue after the customer Cisco switches were replaced with newer model. 

Have been working through with JTAC and the suggestion from them was to ensure the customers Cisco interfaces have "speed nonegotiate" and "switchport nonegotiate" set which they do. We have similarly tried setting no-auto-negotiation on our SRX interfaces, and our side still refuses to come up, while the Cisco side is happily showing as UP and that they are sending bytes to us but not receiving any bytes back. 

I'm at a complete loss on this as to why we can't interface directly - I've tried different JunOS releases on the SRX with no difference. At the moment I have the main links back in production by sitting 2x EX2300-C-12P's in between each fibre link to act as an expensive managed SFP-to-SFP media converter, but it would be far more preferable to have the direct links working again so that the SRX345 cluster will failover between interfaces properly, as currently if the active interface were to fail between the Cisco and 2300-C the SRX on our side won't see that due to the 2300-C <-> SRX interface still being online. 

I currently have a testlab SRX345 using the Genuine Juniper SFP-1G-LX-C Part Number: 740-011614 optic towards the customers Cisco on a spare SFP port using a Genuine Cisco GLC-LH-SM 1000Base-LX optic. 

Does anyone know if there's any technical difference with the Device Specific Juniper optic "EX-SFP-1GE-LX Part Number: 740-011614 Small Form Factor Pluggable 1000Base-LX Gigabit Ethernet Optics" compared to the Common optic SFP-1G-LX-C Part Number: 740-011614 ?

Or whether there is some other optic that would be compatible, or could it genuinely be an issue with the Customer side optics in their switch as they are still using the original Cisco GLC-LH-SM modules which are quite old now.

Thanks

Don't get me started on this subject! I spent months doing the run around with this one. In the end, both devices needed a particular firmware and manual speed settings defined. I had the exact same issues and experiences as yourself. Currently, all is well, but as to 'who' is to blame, I can't answer that one. As you found, the SRX works fine with other kit, even Cisco, just not the 9200L specifically.  The Junos version required is 22.2R3-S3.18 (or above I presume).

Original Message:
Sent: 08-15-2024 19:54
From: ChrisLee
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Hi Steve,

Thanks we have defined speed 1g and link full-duplex already as well with no success, all the options set below.

When I went to look at the SRX yesterday I was surprised to see the LED's above the SFP were lit up, with activity light blinking - however JunOS still told me the link was in a down state. 

I then swapped around some optics in the SRX and took out the genuine SFP and inserted another Cisco GLC-LH-SM module and the link came up!

It still has me thoroughly confused however that the combination of Cisco GLC-LH SM module in a Cisco 3750 was working just fine with our existing optics, and then changing over to the Cisco 9200L resulted in it not working anymore, yet putting a Cisco module in the Juniper did get it to come up.

set interfaces ge-0/0/8 speed 1g
set interfaces ge-0/0/8 link-mode full-duplex
set interfaces ge-0/0/8 ether-options no-auto-negotiation
set interfaces ge-0/0/8 ether-options no-flow-control

Original Message:
Sent: 08-15-2024 19:33
From: spuluka
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

In these link speed configurations with Cisco in addition to setting no negotiate, we also had to explicitly configure speed 1g and duplex full for the link to come up.

------------------------------
Steve Puluka BSEET - Juniper Ambassador
IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP - Retired)
http://puluka.com/home

Original Message:
Sent: 08-14-2024 21:56
From: ChrisLee
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Hi All,

Does anyone have a working example of SRX345 using 1000Base-LX optics to Cisco 9200L switch with 1000Base-LX ? 

We have an issue with our SRX345 cluster where we had 2x 1000Base-LX interfaces towards a customer's 2x Cisco 3750 stack with Cisco 1000Base-LX optics. 

This configuration was working absolutely fine, until the customer replaced their switches with 2x Cisco C9200L-24T-4X running 17.09.04a  CAT9K_LITE_IOSXE

After reconnecting the optics, the customers Cisco SFP interfaces showed the link as UP on their side, however the SRX continues to see the interfaces as DOWN. 

Confirm we receive optical light power from the Cisco SFP, and if customer shuts down their SFP we see the optical light power drop off. Similarly if we shut our SFP, the customers SFP interface goes down, so it's not a patching issue, and keep in mind this exact link and patching was working fine, it was only an issue after the customer Cisco switches were replaced with newer model. 

Have been working through with JTAC and the suggestion from them was to ensure the customers Cisco interfaces have "speed nonegotiate" and "switchport nonegotiate" set which they do. We have similarly tried setting no-auto-negotiation on our SRX interfaces, and our side still refuses to come up, while the Cisco side is happily showing as UP and that they are sending bytes to us but not receiving any bytes back. 

I'm at a complete loss on this as to why we can't interface directly - I've tried different JunOS releases on the SRX with no difference. At the moment I have the main links back in production by sitting 2x EX2300-C-12P's in between each fibre link to act as an expensive managed SFP-to-SFP media converter, but it would be far more preferable to have the direct links working again so that the SRX345 cluster will failover between interfaces properly, as currently if the active interface were to fail between the Cisco and 2300-C the SRX on our side won't see that due to the 2300-C <-> SRX interface still being online. 

I currently have a testlab SRX345 using the Genuine Juniper SFP-1G-LX-C Part Number: 740-011614 optic towards the customers Cisco on a spare SFP port using a Genuine Cisco GLC-LH-SM 1000Base-LX optic. 

Does anyone know if there's any technical difference with the Device Specific Juniper optic "EX-SFP-1GE-LX Part Number: 740-011614 Small Form Factor Pluggable 1000Base-LX Gigabit Ethernet Optics" compared to the Common optic SFP-1G-LX-C Part Number: 740-011614 ?

Or whether there is some other optic that would be compatible, or could it genuinely be an issue with the Customer side optics in their switch as they are still using the original Cisco GLC-LH-SM modules which are quite old now.

Thanks

In my working setup I have a genuine Juniper SFP in an SRX340 (essentially the same as the SRX345 i.e. the 340 can be 'upgraded' to a 345 by way of the appropriate license, believe it or not) and a genuine Cisco SFP in the 9200L. If I can help further in any way, do let me know, because I know how annoying this is!

Don't get me started on this subject! I spent months doing the run around with this one. In the end, both devices needed a particular firmware and manual speed settings defined. I had the exact same issues and experiences as yourself. Currently, all is well, but as to 'who' is to blame, I can't answer that one. As you found, the SRX works fine with other kit, even Cisco, just not the 9200L specifically.  The Junos version required is 22.2R3-S3.18 (or above I presume).

Original Message:
Sent: 08-15-2024 19:54
From: ChrisLee
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Hi Steve,

Thanks we have defined speed 1g and link full-duplex already as well with no success, all the options set below.

When I went to look at the SRX yesterday I was surprised to see the LED's above the SFP were lit up, with activity light blinking - however JunOS still told me the link was in a down state. 

I then swapped around some optics in the SRX and took out the genuine SFP and inserted another Cisco GLC-LH-SM module and the link came up!

It still has me thoroughly confused however that the combination of Cisco GLC-LH SM module in a Cisco 3750 was working just fine with our existing optics, and then changing over to the Cisco 9200L resulted in it not working anymore, yet putting a Cisco module in the Juniper did get it to come up.

set interfaces ge-0/0/8 speed 1g
set interfaces ge-0/0/8 link-mode full-duplex
set interfaces ge-0/0/8 ether-options no-auto-negotiation
set interfaces ge-0/0/8 ether-options no-flow-control

Original Message:
Sent: 08-15-2024 19:33
From: spuluka
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

In these link speed configurations with Cisco in addition to setting no negotiate, we also had to explicitly configure speed 1g and duplex full for the link to come up.

------------------------------
Steve Puluka BSEET - Juniper Ambassador
IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP - Retired)
http://puluka.com/home

Original Message:
Sent: 08-14-2024 21:56
From: ChrisLee
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Hi All,

Does anyone have a working example of SRX345 using 1000Base-LX optics to Cisco 9200L switch with 1000Base-LX ? 

We have an issue with our SRX345 cluster where we had 2x 1000Base-LX interfaces towards a customer's 2x Cisco 3750 stack with Cisco 1000Base-LX optics. 

This configuration was working absolutely fine, until the customer replaced their switches with 2x Cisco C9200L-24T-4X running 17.09.04a  CAT9K_LITE_IOSXE

After reconnecting the optics, the customers Cisco SFP interfaces showed the link as UP on their side, however the SRX continues to see the interfaces as DOWN. 

Confirm we receive optical light power from the Cisco SFP, and if customer shuts down their SFP we see the optical light power drop off. Similarly if we shut our SFP, the customers SFP interface goes down, so it's not a patching issue, and keep in mind this exact link and patching was working fine, it was only an issue after the customer Cisco switches were replaced with newer model. 

Have been working through with JTAC and the suggestion from them was to ensure the customers Cisco interfaces have "speed nonegotiate" and "switchport nonegotiate" set which they do. We have similarly tried setting no-auto-negotiation on our SRX interfaces, and our side still refuses to come up, while the Cisco side is happily showing as UP and that they are sending bytes to us but not receiving any bytes back. 

I'm at a complete loss on this as to why we can't interface directly - I've tried different JunOS releases on the SRX with no difference. At the moment I have the main links back in production by sitting 2x EX2300-C-12P's in between each fibre link to act as an expensive managed SFP-to-SFP media converter, but it would be far more preferable to have the direct links working again so that the SRX345 cluster will failover between interfaces properly, as currently if the active interface were to fail between the Cisco and 2300-C the SRX on our side won't see that due to the 2300-C <-> SRX interface still being online. 

I currently have a testlab SRX345 using the Genuine Juniper SFP-1G-LX-C Part Number: 740-011614 optic towards the customers Cisco on a spare SFP port using a Genuine Cisco GLC-LH-SM 1000Base-LX optic. 

Does anyone know if there's any technical difference with the Device Specific Juniper optic "EX-SFP-1GE-LX Part Number: 740-011614 Small Form Factor Pluggable 1000Base-LX Gigabit Ethernet Optics" compared to the Common optic SFP-1G-LX-C Part Number: 740-011614 ?

Or whether there is some other optic that would be compatible, or could it genuinely be an issue with the Customer side optics in their switch as they are still using the original Cisco GLC-LH-SM modules which are quite old now.

Thanks

Hi EMTSU - if you wouldn't mind sharing some details below (show system information, show system firmware, show chassis hardware) would be great - feel free to completely redact the serial numbers or just the first couple of characters. 

I've just realised all our SRX345's that I've had this issue with have serials starting DS21, so unless it's something super specific to this series. I've noticed I've got varying BIOS versions across different units depending on the JunOS they are currently running. 

Below is the details of the SRX345 that I'm currently testing with. I currently have a genuine Cisco in ge-0/0/8, a genuine Juniper in ge-0/0/9, and a FS.com Juniper coded 1000BaseLX module in ge-0/0/10

Thanks,
Chris

root> show system information
Model: srx345-dual-ac
Family: junos-es
Junos: 22.4R3-S2.11

root> show system firmware
Part             Type              Tag Current               Available             Status
                                       version               version
Routing Engine 0 RE BIOS           0   3.12                  3.12                  OK
Routing Engine 0 RE BIOS Backup    1   3.12                  3.12                  OK

root> show chassis hardware
Hardware inventory:
Item             Version  Part number  Serial number     Description
Chassis                                DS21********      SRX345-DUAL-AC
Routing Engine   REV 08   650-077901   DS21********      RE-SRX345-DUAL-AC
FPC 0                     BUILTIN      BUILTIN           FPC
  PIC 0                                                  8xGE,8xGE SFP Base PIC
    Xcvr 8                NON-JNPR     FN*********       SFP-LX10
    Xcvr 9       REV 01   740-011614   N8*****           SFP-LX10
    Xcvr 10      REV 01   740-031850   F2*********       SFP-LX10
Power Supply 0
Power Supply 1

root>

Original Message:
Sent: 08-19-2024 19:27
From: EMTSU
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

In my working setup I have a genuine Juniper SFP in an SRX340 (essentially the same as the SRX345 i.e. the 340 can be 'upgraded' to a 345 by way of the appropriate license, believe it or not) and a genuine Cisco SFP in the 9200L. If I can help further in any way, do let me know, because I know how annoying this is!

Original Message:
Sent: 08-16-2024 08:58
From: EMTSU
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Don't get me started on this subject! I spent months doing the run around with this one. In the end, both devices needed a particular firmware and manual speed settings defined. I had the exact same issues and experiences as yourself. Currently, all is well, but as to 'who' is to blame, I can't answer that one. As you found, the SRX works fine with other kit, even Cisco, just not the 9200L specifically.  The Junos version required is 22.2R3-S3.18 (or above I presume).

Original Message:
Sent: 08-15-2024 19:54
From: ChrisLee
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Hi Steve,

Thanks we have defined speed 1g and link full-duplex already as well with no success, all the options set below.

When I went to look at the SRX yesterday I was surprised to see the LED's above the SFP were lit up, with activity light blinking - however JunOS still told me the link was in a down state. 

I then swapped around some optics in the SRX and took out the genuine SFP and inserted another Cisco GLC-LH-SM module and the link came up!

It still has me thoroughly confused however that the combination of Cisco GLC-LH SM module in a Cisco 3750 was working just fine with our existing optics, and then changing over to the Cisco 9200L resulted in it not working anymore, yet putting a Cisco module in the Juniper did get it to come up.

set interfaces ge-0/0/8 speed 1g
set interfaces ge-0/0/8 link-mode full-duplex
set interfaces ge-0/0/8 ether-options no-auto-negotiation
set interfaces ge-0/0/8 ether-options no-flow-control

Original Message:
Sent: 08-15-2024 19:33
From: spuluka
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

In these link speed configurations with Cisco in addition to setting no negotiate, we also had to explicitly configure speed 1g and duplex full for the link to come up.

------------------------------
Steve Puluka BSEET - Juniper Ambassador
IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP - Retired)
http://puluka.com/home

Original Message:
Sent: 08-14-2024 21:56
From: ChrisLee
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Hi All,

Does anyone have a working example of SRX345 using 1000Base-LX optics to Cisco 9200L switch with 1000Base-LX ? 

We have an issue with our SRX345 cluster where we had 2x 1000Base-LX interfaces towards a customer's 2x Cisco 3750 stack with Cisco 1000Base-LX optics. 

This configuration was working absolutely fine, until the customer replaced their switches with 2x Cisco C9200L-24T-4X running 17.09.04a  CAT9K_LITE_IOSXE

After reconnecting the optics, the customers Cisco SFP interfaces showed the link as UP on their side, however the SRX continues to see the interfaces as DOWN. 

Confirm we receive optical light power from the Cisco SFP, and if customer shuts down their SFP we see the optical light power drop off. Similarly if we shut our SFP, the customers SFP interface goes down, so it's not a patching issue, and keep in mind this exact link and patching was working fine, it was only an issue after the customer Cisco switches were replaced with newer model. 

Have been working through with JTAC and the suggestion from them was to ensure the customers Cisco interfaces have "speed nonegotiate" and "switchport nonegotiate" set which they do. We have similarly tried setting no-auto-negotiation on our SRX interfaces, and our side still refuses to come up, while the Cisco side is happily showing as UP and that they are sending bytes to us but not receiving any bytes back. 

I'm at a complete loss on this as to why we can't interface directly - I've tried different JunOS releases on the SRX with no difference. At the moment I have the main links back in production by sitting 2x EX2300-C-12P's in between each fibre link to act as an expensive managed SFP-to-SFP media converter, but it would be far more preferable to have the direct links working again so that the SRX345 cluster will failover between interfaces properly, as currently if the active interface were to fail between the Cisco and 2300-C the SRX on our side won't see that due to the 2300-C <-> SRX interface still being online. 

I currently have a testlab SRX345 using the Genuine Juniper SFP-1G-LX-C Part Number: 740-011614 optic towards the customers Cisco on a spare SFP port using a Genuine Cisco GLC-LH-SM 1000Base-LX optic. 

Does anyone know if there's any technical difference with the Device Specific Juniper optic "EX-SFP-1GE-LX Part Number: 740-011614 Small Form Factor Pluggable 1000Base-LX Gigabit Ethernet Optics" compared to the Common optic SFP-1G-LX-C Part Number: 740-011614 ?

Or whether there is some other optic that would be compatible, or could it genuinely be an issue with the Customer side optics in their switch as they are still using the original Cisco GLC-LH-SM modules which are quite old now.

Thanks

*Xcvr 9 is the working SFP in my setup.

I have 2 differences in my port config. i.e. I don't have flow control configured and I am employing vlan-tagging, just FYI.

Original Message:
Sent: 08-19-2024 19:51
From: ChrisLee
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Hi EMTSU - if you wouldn't mind sharing some details below (show system information, show system firmware, show chassis hardware) would be great - feel free to completely redact the serial numbers or just the first couple of characters. 

I've just realised all our SRX345's that I've had this issue with have serials starting DS21, so unless it's something super specific to this series. I've noticed I've got varying BIOS versions across different units depending on the JunOS they are currently running. 

Below is the details of the SRX345 that I'm currently testing with. I currently have a genuine Cisco in ge-0/0/8, a genuine Juniper in ge-0/0/9, and a FS.com Juniper coded 1000BaseLX module in ge-0/0/10

Thanks,
Chris

root> show system information
Model: srx345-dual-ac
Family: junos-es
Junos: 22.4R3-S2.11

root> show system firmware
Part             Type              Tag Current               Available             Status
                                       version               version
Routing Engine 0 RE BIOS           0   3.12                  3.12                  OK
Routing Engine 0 RE BIOS Backup    1   3.12                  3.12                  OK

root> show chassis hardware
Hardware inventory:
Item             Version  Part number  Serial number     Description
Chassis                                DS21********      SRX345-DUAL-AC
Routing Engine   REV 08   650-077901   DS21********      RE-SRX345-DUAL-AC
FPC 0                     BUILTIN      BUILTIN           FPC
  PIC 0                                                  8xGE,8xGE SFP Base PIC
    Xcvr 8                NON-JNPR     FN*********       SFP-LX10
    Xcvr 9       REV 01   740-011614   N8*****           SFP-LX10
    Xcvr 10      REV 01   740-031850   F2*********       SFP-LX10
Power Supply 0
Power Supply 1

root>

Original Message:
Sent: 08-19-2024 19:27
From: EMTSU
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

In my working setup I have a genuine Juniper SFP in an SRX340 (essentially the same as the SRX345 i.e. the 340 can be 'upgraded' to a 345 by way of the appropriate license, believe it or not) and a genuine Cisco SFP in the 9200L. If I can help further in any way, do let me know, because I know how annoying this is!

Original Message:
Sent: 08-16-2024 08:58
From: EMTSU
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Don't get me started on this subject! I spent months doing the run around with this one. In the end, both devices needed a particular firmware and manual speed settings defined. I had the exact same issues and experiences as yourself. Currently, all is well, but as to 'who' is to blame, I can't answer that one. As you found, the SRX works fine with other kit, even Cisco, just not the 9200L specifically.  The Junos version required is 22.2R3-S3.18 (or above I presume).

Original Message:
Sent: 08-15-2024 19:54
From: ChrisLee
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Hi Steve,

Thanks we have defined speed 1g and link full-duplex already as well with no success, all the options set below.

When I went to look at the SRX yesterday I was surprised to see the LED's above the SFP were lit up, with activity light blinking - however JunOS still told me the link was in a down state. 

I then swapped around some optics in the SRX and took out the genuine SFP and inserted another Cisco GLC-LH-SM module and the link came up!

It still has me thoroughly confused however that the combination of Cisco GLC-LH SM module in a Cisco 3750 was working just fine with our existing optics, and then changing over to the Cisco 9200L resulted in it not working anymore, yet putting a Cisco module in the Juniper did get it to come up.

set interfaces ge-0/0/8 speed 1g
set interfaces ge-0/0/8 link-mode full-duplex
set interfaces ge-0/0/8 ether-options no-auto-negotiation
set interfaces ge-0/0/8 ether-options no-flow-control

Original Message:
Sent: 08-15-2024 19:33
From: spuluka
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

In these link speed configurations with Cisco in addition to setting no negotiate, we also had to explicitly configure speed 1g and duplex full for the link to come up.

------------------------------
Steve Puluka BSEET - Juniper Ambassador
IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP - Retired)
http://puluka.com/home

Original Message:
Sent: 08-14-2024 21:56
From: ChrisLee
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Hi All,

Does anyone have a working example of SRX345 using 1000Base-LX optics to Cisco 9200L switch with 1000Base-LX ? 

We have an issue with our SRX345 cluster where we had 2x 1000Base-LX interfaces towards a customer's 2x Cisco 3750 stack with Cisco 1000Base-LX optics. 

This configuration was working absolutely fine, until the customer replaced their switches with 2x Cisco C9200L-24T-4X running 17.09.04a  CAT9K_LITE_IOSXE

After reconnecting the optics, the customers Cisco SFP interfaces showed the link as UP on their side, however the SRX continues to see the interfaces as DOWN. 

Confirm we receive optical light power from the Cisco SFP, and if customer shuts down their SFP we see the optical light power drop off. Similarly if we shut our SFP, the customers SFP interface goes down, so it's not a patching issue, and keep in mind this exact link and patching was working fine, it was only an issue after the customer Cisco switches were replaced with newer model. 

Have been working through with JTAC and the suggestion from them was to ensure the customers Cisco interfaces have "speed nonegotiate" and "switchport nonegotiate" set which they do. We have similarly tried setting no-auto-negotiation on our SRX interfaces, and our side still refuses to come up, while the Cisco side is happily showing as UP and that they are sending bytes to us but not receiving any bytes back. 

I'm at a complete loss on this as to why we can't interface directly - I've tried different JunOS releases on the SRX with no difference. At the moment I have the main links back in production by sitting 2x EX2300-C-12P's in between each fibre link to act as an expensive managed SFP-to-SFP media converter, but it would be far more preferable to have the direct links working again so that the SRX345 cluster will failover between interfaces properly, as currently if the active interface were to fail between the Cisco and 2300-C the SRX on our side won't see that due to the 2300-C <-> SRX interface still being online. 

I currently have a testlab SRX345 using the Genuine Juniper SFP-1G-LX-C Part Number: 740-011614 optic towards the customers Cisco on a spare SFP port using a Genuine Cisco GLC-LH-SM 1000Base-LX optic. 

Does anyone know if there's any technical difference with the Device Specific Juniper optic "EX-SFP-1GE-LX Part Number: 740-011614 Small Form Factor Pluggable 1000Base-LX Gigabit Ethernet Optics" compared to the Common optic SFP-1G-LX-C Part Number: 740-011614 ?

Or whether there is some other optic that would be compatible, or could it genuinely be an issue with the Customer side optics in their switch as they are still using the original Cisco GLC-LH-SM modules which are quite old now.

Thanks

Thanks for that - also if I can trouble you for one more command which I couldn't remember the other day which will show a bit more of the SFP vendor details and versions...

root> show chassis pic fpc-slot 0 pic-slot 0
FPC slot 0, PIC slot 0 information:
  Type                             8xGE,8xGE SFP Base PIC
  State                            Online
  PIC version                      1.8
  Uptime                           56 days, 23 hours, 46 minutes, 15 seconds

PIC port information:
                         Fiber                    Xcvr vendor       Wave-                     Xcvr          JNPR     MSA
  Port Cable type        type  Xcvr vendor        part number       length                    Firmware      Rev      Version
  8    GIGE 1000LX10     SM    CISCO-FINISAR      FTLF1318P2BCL-CS  1310 nm                   0.0                    SFF-8472 ver n/a
  9    GIGE 1000LX10     SM    FINISAR CORP.      FTLF1318P3BTL-J1  1310 nm                   0.0           REV 01   SFF-8472 ver 9.3
  10   GIGE 1000LX10     SM    FS                 SFP1G-LX-31       1310 nm                   0.0           REV 01   SFF-8472 ver 9.3

root>

*Xcvr 9 is the working SFP in my setup.

I have 2 differences in my port config. i.e. I don't have flow control configured and I am employing vlan-tagging, just FYI.

Original Message:
Sent: 08-19-2024 19:51
From: ChrisLee
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Hi EMTSU - if you wouldn't mind sharing some details below (show system information, show system firmware, show chassis hardware) would be great - feel free to completely redact the serial numbers or just the first couple of characters. 

I've just realised all our SRX345's that I've had this issue with have serials starting DS21, so unless it's something super specific to this series. I've noticed I've got varying BIOS versions across different units depending on the JunOS they are currently running. 

Below is the details of the SRX345 that I'm currently testing with. I currently have a genuine Cisco in ge-0/0/8, a genuine Juniper in ge-0/0/9, and a FS.com Juniper coded 1000BaseLX module in ge-0/0/10

Thanks,
Chris

root> show system information
Model: srx345-dual-ac
Family: junos-es
Junos: 22.4R3-S2.11

root> show system firmware
Part             Type              Tag Current               Available             Status
                                       version               version
Routing Engine 0 RE BIOS           0   3.12                  3.12                  OK
Routing Engine 0 RE BIOS Backup    1   3.12                  3.12                  OK

root> show chassis hardware
Hardware inventory:
Item             Version  Part number  Serial number     Description
Chassis                                DS21********      SRX345-DUAL-AC
Routing Engine   REV 08   650-077901   DS21********      RE-SRX345-DUAL-AC
FPC 0                     BUILTIN      BUILTIN           FPC
  PIC 0                                                  8xGE,8xGE SFP Base PIC
    Xcvr 8                NON-JNPR     FN*********       SFP-LX10
    Xcvr 9       REV 01   740-011614   N8*****           SFP-LX10
    Xcvr 10      REV 01   740-031850   F2*********       SFP-LX10
Power Supply 0
Power Supply 1

root>

Original Message:
Sent: 08-19-2024 19:27
From: EMTSU
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

In my working setup I have a genuine Juniper SFP in an SRX340 (essentially the same as the SRX345 i.e. the 340 can be 'upgraded' to a 345 by way of the appropriate license, believe it or not) and a genuine Cisco SFP in the 9200L. If I can help further in any way, do let me know, because I know how annoying this is!

Original Message:
Sent: 08-16-2024 08:58
From: EMTSU
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Don't get me started on this subject! I spent months doing the run around with this one. In the end, both devices needed a particular firmware and manual speed settings defined. I had the exact same issues and experiences as yourself. Currently, all is well, but as to 'who' is to blame, I can't answer that one. As you found, the SRX works fine with other kit, even Cisco, just not the 9200L specifically.  The Junos version required is 22.2R3-S3.18 (or above I presume).

Original Message:
Sent: 08-15-2024 19:54
From: ChrisLee
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Hi Steve,

Thanks we have defined speed 1g and link full-duplex already as well with no success, all the options set below.

When I went to look at the SRX yesterday I was surprised to see the LED's above the SFP were lit up, with activity light blinking - however JunOS still told me the link was in a down state. 

I then swapped around some optics in the SRX and took out the genuine SFP and inserted another Cisco GLC-LH-SM module and the link came up!

It still has me thoroughly confused however that the combination of Cisco GLC-LH SM module in a Cisco 3750 was working just fine with our existing optics, and then changing over to the Cisco 9200L resulted in it not working anymore, yet putting a Cisco module in the Juniper did get it to come up.

set interfaces ge-0/0/8 speed 1g
set interfaces ge-0/0/8 link-mode full-duplex
set interfaces ge-0/0/8 ether-options no-auto-negotiation
set interfaces ge-0/0/8 ether-options no-flow-control

Original Message:
Sent: 08-15-2024 19:33
From: spuluka
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

In these link speed configurations with Cisco in addition to setting no negotiate, we also had to explicitly configure speed 1g and duplex full for the link to come up.

------------------------------
Steve Puluka BSEET - Juniper Ambassador
IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP - Retired)
http://puluka.com/home

Original Message:
Sent: 08-14-2024 21:56
From: ChrisLee
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Hi All,

Does anyone have a working example of SRX345 using 1000Base-LX optics to Cisco 9200L switch with 1000Base-LX ? 

We have an issue with our SRX345 cluster where we had 2x 1000Base-LX interfaces towards a customer's 2x Cisco 3750 stack with Cisco 1000Base-LX optics. 

This configuration was working absolutely fine, until the customer replaced their switches with 2x Cisco C9200L-24T-4X running 17.09.04a  CAT9K_LITE_IOSXE

After reconnecting the optics, the customers Cisco SFP interfaces showed the link as UP on their side, however the SRX continues to see the interfaces as DOWN. 

Confirm we receive optical light power from the Cisco SFP, and if customer shuts down their SFP we see the optical light power drop off. Similarly if we shut our SFP, the customers SFP interface goes down, so it's not a patching issue, and keep in mind this exact link and patching was working fine, it was only an issue after the customer Cisco switches were replaced with newer model. 

Have been working through with JTAC and the suggestion from them was to ensure the customers Cisco interfaces have "speed nonegotiate" and "switchport nonegotiate" set which they do. We have similarly tried setting no-auto-negotiation on our SRX interfaces, and our side still refuses to come up, while the Cisco side is happily showing as UP and that they are sending bytes to us but not receiving any bytes back. 

I'm at a complete loss on this as to why we can't interface directly - I've tried different JunOS releases on the SRX with no difference. At the moment I have the main links back in production by sitting 2x EX2300-C-12P's in between each fibre link to act as an expensive managed SFP-to-SFP media converter, but it would be far more preferable to have the direct links working again so that the SRX345 cluster will failover between interfaces properly, as currently if the active interface were to fail between the Cisco and 2300-C the SRX on our side won't see that due to the 2300-C <-> SRX interface still being online. 

I currently have a testlab SRX345 using the Genuine Juniper SFP-1G-LX-C Part Number: 740-011614 optic towards the customers Cisco on a spare SFP port using a Genuine Cisco GLC-LH-SM 1000Base-LX optic. 

Does anyone know if there's any technical difference with the Device Specific Juniper optic "EX-SFP-1GE-LX Part Number: 740-011614 Small Form Factor Pluggable 1000Base-LX Gigabit Ethernet Optics" compared to the Common optic SFP-1G-LX-C Part Number: 740-011614 ?

Or whether there is some other optic that would be compatible, or could it genuinely be an issue with the Customer side optics in their switch as they are still using the original Cisco GLC-LH-SM modules which are quite old now.

Thanks

Original Message:
Sent: 08-21-2024 22:16
From: ChrisLee
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Thanks for that - also if I can trouble you for one more command which I couldn't remember the other day which will show a bit more of the SFP vendor details and versions...

root> show chassis pic fpc-slot 0 pic-slot 0
FPC slot 0, PIC slot 0 information:
  Type                             8xGE,8xGE SFP Base PIC
  State                            Online
  PIC version                      1.8
  Uptime                           56 days, 23 hours, 46 minutes, 15 seconds

PIC port information:
                         Fiber                    Xcvr vendor       Wave-                     Xcvr          JNPR     MSA
  Port Cable type        type  Xcvr vendor        part number       length                    Firmware      Rev      Version
  8    GIGE 1000LX10     SM    CISCO-FINISAR      FTLF1318P2BCL-CS  1310 nm                   0.0                    SFF-8472 ver n/a
  9    GIGE 1000LX10     SM    FINISAR CORP.      FTLF1318P3BTL-J1  1310 nm                   0.0           REV 01   SFF-8472 ver 9.3
  10   GIGE 1000LX10     SM    FS                 SFP1G-LX-31       1310 nm                   0.0           REV 01   SFF-8472 ver 9.3

root>

Original Message:
Sent: 08-20-2024 12:14
From: EMTSU
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

*Xcvr 9 is the working SFP in my setup.

I have 2 differences in my port config. i.e. I don't have flow control configured and I am employing vlan-tagging, just FYI.

Original Message:
Sent: 08-19-2024 19:51
From: ChrisLee
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Hi EMTSU - if you wouldn't mind sharing some details below (show system information, show system firmware, show chassis hardware) would be great - feel free to completely redact the serial numbers or just the first couple of characters. 

I've just realised all our SRX345's that I've had this issue with have serials starting DS21, so unless it's something super specific to this series. I've noticed I've got varying BIOS versions across different units depending on the JunOS they are currently running. 

Below is the details of the SRX345 that I'm currently testing with. I currently have a genuine Cisco in ge-0/0/8, a genuine Juniper in ge-0/0/9, and a FS.com Juniper coded 1000BaseLX module in ge-0/0/10

Thanks,
Chris

root> show system information
Model: srx345-dual-ac
Family: junos-es
Junos: 22.4R3-S2.11

root> show system firmware
Part             Type              Tag Current               Available             Status
                                       version               version
Routing Engine 0 RE BIOS           0   3.12                  3.12                  OK
Routing Engine 0 RE BIOS Backup    1   3.12                  3.12                  OK

root> show chassis hardware
Hardware inventory:
Item             Version  Part number  Serial number     Description
Chassis                                DS21********      SRX345-DUAL-AC
Routing Engine   REV 08   650-077901   DS21********      RE-SRX345-DUAL-AC
FPC 0                     BUILTIN      BUILTIN           FPC
  PIC 0                                                  8xGE,8xGE SFP Base PIC
    Xcvr 8                NON-JNPR     FN*********       SFP-LX10
    Xcvr 9       REV 01   740-011614   N8*****           SFP-LX10
    Xcvr 10      REV 01   740-031850   F2*********       SFP-LX10
Power Supply 0
Power Supply 1

root>

Original Message:
Sent: 08-19-2024 19:27
From: EMTSU
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

In my working setup I have a genuine Juniper SFP in an SRX340 (essentially the same as the SRX345 i.e. the 340 can be 'upgraded' to a 345 by way of the appropriate license, believe it or not) and a genuine Cisco SFP in the 9200L. If I can help further in any way, do let me know, because I know how annoying this is!

Original Message:
Sent: 08-16-2024 08:58
From: EMTSU
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Don't get me started on this subject! I spent months doing the run around with this one. In the end, both devices needed a particular firmware and manual speed settings defined. I had the exact same issues and experiences as yourself. Currently, all is well, but as to 'who' is to blame, I can't answer that one. As you found, the SRX works fine with other kit, even Cisco, just not the 9200L specifically.  The Junos version required is 22.2R3-S3.18 (or above I presume).

Original Message:
Sent: 08-15-2024 19:54
From: ChrisLee
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Hi Steve,

Thanks we have defined speed 1g and link full-duplex already as well with no success, all the options set below.

When I went to look at the SRX yesterday I was surprised to see the LED's above the SFP were lit up, with activity light blinking - however JunOS still told me the link was in a down state. 

I then swapped around some optics in the SRX and took out the genuine SFP and inserted another Cisco GLC-LH-SM module and the link came up!

It still has me thoroughly confused however that the combination of Cisco GLC-LH SM module in a Cisco 3750 was working just fine with our existing optics, and then changing over to the Cisco 9200L resulted in it not working anymore, yet putting a Cisco module in the Juniper did get it to come up.

set interfaces ge-0/0/8 speed 1g
set interfaces ge-0/0/8 link-mode full-duplex
set interfaces ge-0/0/8 ether-options no-auto-negotiation
set interfaces ge-0/0/8 ether-options no-flow-control

Original Message:
Sent: 08-15-2024 19:33
From: spuluka
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

In these link speed configurations with Cisco in addition to setting no negotiate, we also had to explicitly configure speed 1g and duplex full for the link to come up.

------------------------------
Steve Puluka BSEET - Juniper Ambassador
IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP - Retired)
http://puluka.com/home

Original Message:
Sent: 08-14-2024 21:56
From: ChrisLee
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Hi All,

Does anyone have a working example of SRX345 using 1000Base-LX optics to Cisco 9200L switch with 1000Base-LX ? 

We have an issue with our SRX345 cluster where we had 2x 1000Base-LX interfaces towards a customer's 2x Cisco 3750 stack with Cisco 1000Base-LX optics. 

This configuration was working absolutely fine, until the customer replaced their switches with 2x Cisco C9200L-24T-4X running 17.09.04a  CAT9K_LITE_IOSXE

After reconnecting the optics, the customers Cisco SFP interfaces showed the link as UP on their side, however the SRX continues to see the interfaces as DOWN. 

Confirm we receive optical light power from the Cisco SFP, and if customer shuts down their SFP we see the optical light power drop off. Similarly if we shut our SFP, the customers SFP interface goes down, so it's not a patching issue, and keep in mind this exact link and patching was working fine, it was only an issue after the customer Cisco switches were replaced with newer model. 

Have been working through with JTAC and the suggestion from them was to ensure the customers Cisco interfaces have "speed nonegotiate" and "switchport nonegotiate" set which they do. We have similarly tried setting no-auto-negotiation on our SRX interfaces, and our side still refuses to come up, while the Cisco side is happily showing as UP and that they are sending bytes to us but not receiving any bytes back. 

I'm at a complete loss on this as to why we can't interface directly - I've tried different JunOS releases on the SRX with no difference. At the moment I have the main links back in production by sitting 2x EX2300-C-12P's in between each fibre link to act as an expensive managed SFP-to-SFP media converter, but it would be far more preferable to have the direct links working again so that the SRX345 cluster will failover between interfaces properly, as currently if the active interface were to fail between the Cisco and 2300-C the SRX on our side won't see that due to the 2300-C <-> SRX interface still being online. 

I currently have a testlab SRX345 using the Genuine Juniper SFP-1G-LX-C Part Number: 740-011614 optic towards the customers Cisco on a spare SFP port using a Genuine Cisco GLC-LH-SM 1000Base-LX optic. 

Does anyone know if there's any technical difference with the Device Specific Juniper optic "EX-SFP-1GE-LX Part Number: 740-011614 Small Form Factor Pluggable 1000Base-LX Gigabit Ethernet Optics" compared to the Common optic SFP-1G-LX-C Part Number: 740-011614 ?

Or whether there is some other optic that would be compatible, or could it genuinely be an issue with the Customer side optics in their switch as they are still using the original Cisco GLC-LH-SM modules which are quite old now.

Thanks

I have some additional information Chris, as follows:

Cisco Port Config.

interface GigabitEthernet1/1/4

switchport trunk native vlan 999

switchport trunk allowed vlan 900

switchport mode trunk

switchport nonegotiate

speed nonegotiate

no cdp enable

Cisco Software

Version 17.12.3 (this just happens to be the latest, the setup works with an older IOS version, but need to confirm that one).

Original Message:
Sent: 08-22-2024 05:07
From: EMTSU
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Original Message:
Sent: 08-21-2024 22:16
From: ChrisLee
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Thanks for that - also if I can trouble you for one more command which I couldn't remember the other day which will show a bit more of the SFP vendor details and versions...

root> show chassis pic fpc-slot 0 pic-slot 0
FPC slot 0, PIC slot 0 information:
  Type                             8xGE,8xGE SFP Base PIC
  State                            Online
  PIC version                      1.8
  Uptime                           56 days, 23 hours, 46 minutes, 15 seconds

PIC port information:
                         Fiber                    Xcvr vendor       Wave-                     Xcvr          JNPR     MSA
  Port Cable type        type  Xcvr vendor        part number       length                    Firmware      Rev      Version
  8    GIGE 1000LX10     SM    CISCO-FINISAR      FTLF1318P2BCL-CS  1310 nm                   0.0                    SFF-8472 ver n/a
  9    GIGE 1000LX10     SM    FINISAR CORP.      FTLF1318P3BTL-J1  1310 nm                   0.0           REV 01   SFF-8472 ver 9.3
  10   GIGE 1000LX10     SM    FS                 SFP1G-LX-31       1310 nm                   0.0           REV 01   SFF-8472 ver 9.3

root>

Original Message:
Sent: 08-20-2024 12:14
From: EMTSU
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

*Xcvr 9 is the working SFP in my setup.

I have 2 differences in my port config. i.e. I don't have flow control configured and I am employing vlan-tagging, just FYI.

Original Message:
Sent: 08-19-2024 19:51
From: ChrisLee
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Hi EMTSU - if you wouldn't mind sharing some details below (show system information, show system firmware, show chassis hardware) would be great - feel free to completely redact the serial numbers or just the first couple of characters. 

I've just realised all our SRX345's that I've had this issue with have serials starting DS21, so unless it's something super specific to this series. I've noticed I've got varying BIOS versions across different units depending on the JunOS they are currently running. 

Below is the details of the SRX345 that I'm currently testing with. I currently have a genuine Cisco in ge-0/0/8, a genuine Juniper in ge-0/0/9, and a FS.com Juniper coded 1000BaseLX module in ge-0/0/10

Thanks,
Chris

root> show system information
Model: srx345-dual-ac
Family: junos-es
Junos: 22.4R3-S2.11

root> show system firmware
Part             Type              Tag Current               Available             Status
                                       version               version
Routing Engine 0 RE BIOS           0   3.12                  3.12                  OK
Routing Engine 0 RE BIOS Backup    1   3.12                  3.12                  OK

root> show chassis hardware
Hardware inventory:
Item             Version  Part number  Serial number     Description
Chassis                                DS21********      SRX345-DUAL-AC
Routing Engine   REV 08   650-077901   DS21********      RE-SRX345-DUAL-AC
FPC 0                     BUILTIN      BUILTIN           FPC
  PIC 0                                                  8xGE,8xGE SFP Base PIC
    Xcvr 8                NON-JNPR     FN*********       SFP-LX10
    Xcvr 9       REV 01   740-011614   N8*****           SFP-LX10
    Xcvr 10      REV 01   740-031850   F2*********       SFP-LX10
Power Supply 0
Power Supply 1

root>

Original Message:
Sent: 08-19-2024 19:27
From: EMTSU
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

In my working setup I have a genuine Juniper SFP in an SRX340 (essentially the same as the SRX345 i.e. the 340 can be 'upgraded' to a 345 by way of the appropriate license, believe it or not) and a genuine Cisco SFP in the 9200L. If I can help further in any way, do let me know, because I know how annoying this is!

Original Message:
Sent: 08-16-2024 08:58
From: EMTSU
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Don't get me started on this subject! I spent months doing the run around with this one. In the end, both devices needed a particular firmware and manual speed settings defined. I had the exact same issues and experiences as yourself. Currently, all is well, but as to 'who' is to blame, I can't answer that one. As you found, the SRX works fine with other kit, even Cisco, just not the 9200L specifically.  The Junos version required is 22.2R3-S3.18 (or above I presume).

Original Message:
Sent: 08-15-2024 19:54
From: ChrisLee
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Hi Steve,

Thanks we have defined speed 1g and link full-duplex already as well with no success, all the options set below.

When I went to look at the SRX yesterday I was surprised to see the LED's above the SFP were lit up, with activity light blinking - however JunOS still told me the link was in a down state. 

I then swapped around some optics in the SRX and took out the genuine SFP and inserted another Cisco GLC-LH-SM module and the link came up!

It still has me thoroughly confused however that the combination of Cisco GLC-LH SM module in a Cisco 3750 was working just fine with our existing optics, and then changing over to the Cisco 9200L resulted in it not working anymore, yet putting a Cisco module in the Juniper did get it to come up.

set interfaces ge-0/0/8 speed 1g
set interfaces ge-0/0/8 link-mode full-duplex
set interfaces ge-0/0/8 ether-options no-auto-negotiation
set interfaces ge-0/0/8 ether-options no-flow-control

Original Message:
Sent: 08-15-2024 19:33
From: spuluka
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

In these link speed configurations with Cisco in addition to setting no negotiate, we also had to explicitly configure speed 1g and duplex full for the link to come up.

------------------------------
Steve Puluka BSEET - Juniper Ambassador
IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP - Retired)
http://puluka.com/home

Original Message:
Sent: 08-14-2024 21:56
From: ChrisLee
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Hi All,

Does anyone have a working example of SRX345 using 1000Base-LX optics to Cisco 9200L switch with 1000Base-LX ? 

We have an issue with our SRX345 cluster where we had 2x 1000Base-LX interfaces towards a customer's 2x Cisco 3750 stack with Cisco 1000Base-LX optics. 

This configuration was working absolutely fine, until the customer replaced their switches with 2x Cisco C9200L-24T-4X running 17.09.04a  CAT9K_LITE_IOSXE

After reconnecting the optics, the customers Cisco SFP interfaces showed the link as UP on their side, however the SRX continues to see the interfaces as DOWN. 

Confirm we receive optical light power from the Cisco SFP, and if customer shuts down their SFP we see the optical light power drop off. Similarly if we shut our SFP, the customers SFP interface goes down, so it's not a patching issue, and keep in mind this exact link and patching was working fine, it was only an issue after the customer Cisco switches were replaced with newer model. 

Have been working through with JTAC and the suggestion from them was to ensure the customers Cisco interfaces have "speed nonegotiate" and "switchport nonegotiate" set which they do. We have similarly tried setting no-auto-negotiation on our SRX interfaces, and our side still refuses to come up, while the Cisco side is happily showing as UP and that they are sending bytes to us but not receiving any bytes back. 

I'm at a complete loss on this as to why we can't interface directly - I've tried different JunOS releases on the SRX with no difference. At the moment I have the main links back in production by sitting 2x EX2300-C-12P's in between each fibre link to act as an expensive managed SFP-to-SFP media converter, but it would be far more preferable to have the direct links working again so that the SRX345 cluster will failover between interfaces properly, as currently if the active interface were to fail between the Cisco and 2300-C the SRX on our side won't see that due to the 2300-C <-> SRX interface still being online. 

I currently have a testlab SRX345 using the Genuine Juniper SFP-1G-LX-C Part Number: 740-011614 optic towards the customers Cisco on a spare SFP port using a Genuine Cisco GLC-LH-SM 1000Base-LX optic. 

Does anyone know if there's any technical difference with the Device Specific Juniper optic "EX-SFP-1GE-LX Part Number: 740-011614 Small Form Factor Pluggable 1000Base-LX Gigabit Ethernet Optics" compared to the Common optic SFP-1G-LX-C Part Number: 740-011614 ?

Or whether there is some other optic that would be compatible, or could it genuinely be an issue with the Customer side optics in their switch as they are still using the original Cisco GLC-LH-SM modules which are quite old now.

Thanks

@ChrisLee: how are you getting on with this issue? I'm still having intermittent issues with it.

Original Message:
Sent: 08-23-2024 05:25
From: EMTSU-IT
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

I have some additional information Chris, as follows:

Cisco Port Config.

interface GigabitEthernet1/1/4

switchport trunk native vlan 999

switchport trunk allowed vlan 900

switchport mode trunk

switchport nonegotiate

speed nonegotiate

no cdp enable

Cisco Software

Version 17.12.3 (this just happens to be the latest, the setup works with an older IOS version, but need to confirm that one).

Original Message:
Sent: 08-22-2024 05:07
From: EMTSU
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Original Message:
Sent: 08-21-2024 22:16
From: ChrisLee
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Thanks for that - also if I can trouble you for one more command which I couldn't remember the other day which will show a bit more of the SFP vendor details and versions...

root> show chassis pic fpc-slot 0 pic-slot 0
FPC slot 0, PIC slot 0 information:
  Type                             8xGE,8xGE SFP Base PIC
  State                            Online
  PIC version                      1.8
  Uptime                           56 days, 23 hours, 46 minutes, 15 seconds

PIC port information:
                         Fiber                    Xcvr vendor       Wave-                     Xcvr          JNPR     MSA
  Port Cable type        type  Xcvr vendor        part number       length                    Firmware      Rev      Version
  8    GIGE 1000LX10     SM    CISCO-FINISAR      FTLF1318P2BCL-CS  1310 nm                   0.0                    SFF-8472 ver n/a
  9    GIGE 1000LX10     SM    FINISAR CORP.      FTLF1318P3BTL-J1  1310 nm                   0.0           REV 01   SFF-8472 ver 9.3
  10   GIGE 1000LX10     SM    FS                 SFP1G-LX-31       1310 nm                   0.0           REV 01   SFF-8472 ver 9.3

root>

Original Message:
Sent: 08-20-2024 12:14
From: EMTSU
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

*Xcvr 9 is the working SFP in my setup.

I have 2 differences in my port config. i.e. I don't have flow control configured and I am employing vlan-tagging, just FYI.

Original Message:
Sent: 08-19-2024 19:51
From: ChrisLee
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Hi EMTSU - if you wouldn't mind sharing some details below (show system information, show system firmware, show chassis hardware) would be great - feel free to completely redact the serial numbers or just the first couple of characters. 

I've just realised all our SRX345's that I've had this issue with have serials starting DS21, so unless it's something super specific to this series. I've noticed I've got varying BIOS versions across different units depending on the JunOS they are currently running. 

Below is the details of the SRX345 that I'm currently testing with. I currently have a genuine Cisco in ge-0/0/8, a genuine Juniper in ge-0/0/9, and a FS.com Juniper coded 1000BaseLX module in ge-0/0/10

Thanks,
Chris

root> show system information
Model: srx345-dual-ac
Family: junos-es
Junos: 22.4R3-S2.11

root> show system firmware
Part             Type              Tag Current               Available             Status
                                       version               version
Routing Engine 0 RE BIOS           0   3.12                  3.12                  OK
Routing Engine 0 RE BIOS Backup    1   3.12                  3.12                  OK

root> show chassis hardware
Hardware inventory:
Item             Version  Part number  Serial number     Description
Chassis                                DS21********      SRX345-DUAL-AC
Routing Engine   REV 08   650-077901   DS21********      RE-SRX345-DUAL-AC
FPC 0                     BUILTIN      BUILTIN           FPC
  PIC 0                                                  8xGE,8xGE SFP Base PIC
    Xcvr 8                NON-JNPR     FN*********       SFP-LX10
    Xcvr 9       REV 01   740-011614   N8*****           SFP-LX10
    Xcvr 10      REV 01   740-031850   F2*********       SFP-LX10
Power Supply 0
Power Supply 1

root>

Original Message:
Sent: 08-19-2024 19:27
From: EMTSU
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

In my working setup I have a genuine Juniper SFP in an SRX340 (essentially the same as the SRX345 i.e. the 340 can be 'upgraded' to a 345 by way of the appropriate license, believe it or not) and a genuine Cisco SFP in the 9200L. If I can help further in any way, do let me know, because I know how annoying this is!

Original Message:
Sent: 08-16-2024 08:58
From: EMTSU
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Don't get me started on this subject! I spent months doing the run around with this one. In the end, both devices needed a particular firmware and manual speed settings defined. I had the exact same issues and experiences as yourself. Currently, all is well, but as to 'who' is to blame, I can't answer that one. As you found, the SRX works fine with other kit, even Cisco, just not the 9200L specifically.  The Junos version required is 22.2R3-S3.18 (or above I presume).

Original Message:
Sent: 08-15-2024 19:54
From: ChrisLee
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Hi Steve,

Thanks we have defined speed 1g and link full-duplex already as well with no success, all the options set below.

When I went to look at the SRX yesterday I was surprised to see the LED's above the SFP were lit up, with activity light blinking - however JunOS still told me the link was in a down state. 

I then swapped around some optics in the SRX and took out the genuine SFP and inserted another Cisco GLC-LH-SM module and the link came up!

It still has me thoroughly confused however that the combination of Cisco GLC-LH SM module in a Cisco 3750 was working just fine with our existing optics, and then changing over to the Cisco 9200L resulted in it not working anymore, yet putting a Cisco module in the Juniper did get it to come up.

set interfaces ge-0/0/8 speed 1g
set interfaces ge-0/0/8 link-mode full-duplex
set interfaces ge-0/0/8 ether-options no-auto-negotiation
set interfaces ge-0/0/8 ether-options no-flow-control

Original Message:
Sent: 08-15-2024 19:33
From: spuluka
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

In these link speed configurations with Cisco in addition to setting no negotiate, we also had to explicitly configure speed 1g and duplex full for the link to come up.

------------------------------
Steve Puluka BSEET - Juniper Ambassador
IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP - Retired)
http://puluka.com/home

Original Message:
Sent: 08-14-2024 21:56
From: ChrisLee
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Hi All,

Does anyone have a working example of SRX345 using 1000Base-LX optics to Cisco 9200L switch with 1000Base-LX ? 

We have an issue with our SRX345 cluster where we had 2x 1000Base-LX interfaces towards a customer's 2x Cisco 3750 stack with Cisco 1000Base-LX optics. 

This configuration was working absolutely fine, until the customer replaced their switches with 2x Cisco C9200L-24T-4X running 17.09.04a  CAT9K_LITE_IOSXE

After reconnecting the optics, the customers Cisco SFP interfaces showed the link as UP on their side, however the SRX continues to see the interfaces as DOWN. 

Confirm we receive optical light power from the Cisco SFP, and if customer shuts down their SFP we see the optical light power drop off. Similarly if we shut our SFP, the customers SFP interface goes down, so it's not a patching issue, and keep in mind this exact link and patching was working fine, it was only an issue after the customer Cisco switches were replaced with newer model. 

Have been working through with JTAC and the suggestion from them was to ensure the customers Cisco interfaces have "speed nonegotiate" and "switchport nonegotiate" set which they do. We have similarly tried setting no-auto-negotiation on our SRX interfaces, and our side still refuses to come up, while the Cisco side is happily showing as UP and that they are sending bytes to us but not receiving any bytes back. 

I'm at a complete loss on this as to why we can't interface directly - I've tried different JunOS releases on the SRX with no difference. At the moment I have the main links back in production by sitting 2x EX2300-C-12P's in between each fibre link to act as an expensive managed SFP-to-SFP media converter, but it would be far more preferable to have the direct links working again so that the SRX345 cluster will failover between interfaces properly, as currently if the active interface were to fail between the Cisco and 2300-C the SRX on our side won't see that due to the 2300-C <-> SRX interface still being online. 

I currently have a testlab SRX345 using the Genuine Juniper SFP-1G-LX-C Part Number: 740-011614 optic towards the customers Cisco on a spare SFP port using a Genuine Cisco GLC-LH-SM 1000Base-LX optic. 

Does anyone know if there's any technical difference with the Device Specific Juniper optic "EX-SFP-1GE-LX Part Number: 740-011614 Small Form Factor Pluggable 1000Base-LX Gigabit Ethernet Optics" compared to the Common optic SFP-1G-LX-C Part Number: 740-011614 ?

Or whether there is some other optic that would be compatible, or could it genuinely be an issue with the Customer side optics in their switch as they are still using the original Cisco GLC-LH-SM modules which are quite old now.

Thanks

Hi @EMTSU 

Sorry to say I ended up giving up on this and have closed off my JTAC case as well. 

I was unable to get traction from the customer to participate in the troubleshooting by running any commands/settings that JTAC were requesting anyway making further troubleshooting impossible. 

I've chalked this up to just being some odd issue specific to the SRX340/345 series (maybe all 3xx branch series?) given that the exact same optics work when moving the SFP from the SRX into an EX2300.  So I'll continue to run these 2x links between a couple of EX2300-C's for the time being probably until we refresh the SRX's with whatever comes after them. 

Good luck and if you do get any success with this issue be it a Juniper or Cisco specific problem I'd be glad to hear it. 

Thanks

Chris

Original Message:
Sent: 10-10-2024 04:31
From: EMTSU-IT
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

@ChrisLee: how are you getting on with this issue? I'm still having intermittent issues with it.

Original Message:
Sent: 08-23-2024 05:25
From: EMTSU-IT
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

I have some additional information Chris, as follows:

Cisco Port Config.

interface GigabitEthernet1/1/4

switchport trunk native vlan 999

switchport trunk allowed vlan 900

switchport mode trunk

switchport nonegotiate

speed nonegotiate

no cdp enable

Cisco Software

Version 17.12.3 (this just happens to be the latest, the setup works with an older IOS version, but need to confirm that one).

Original Message:
Sent: 08-22-2024 05:07
From: EMTSU
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Original Message:
Sent: 08-21-2024 22:16
From: ChrisLee
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Thanks for that - also if I can trouble you for one more command which I couldn't remember the other day which will show a bit more of the SFP vendor details and versions...

root> show chassis pic fpc-slot 0 pic-slot 0
FPC slot 0, PIC slot 0 information:
  Type                             8xGE,8xGE SFP Base PIC
  State                            Online
  PIC version                      1.8
  Uptime                           56 days, 23 hours, 46 minutes, 15 seconds

PIC port information:
                         Fiber                    Xcvr vendor       Wave-                     Xcvr          JNPR     MSA
  Port Cable type        type  Xcvr vendor        part number       length                    Firmware      Rev      Version
  8    GIGE 1000LX10     SM    CISCO-FINISAR      FTLF1318P2BCL-CS  1310 nm                   0.0                    SFF-8472 ver n/a
  9    GIGE 1000LX10     SM    FINISAR CORP.      FTLF1318P3BTL-J1  1310 nm                   0.0           REV 01   SFF-8472 ver 9.3
  10   GIGE 1000LX10     SM    FS                 SFP1G-LX-31       1310 nm                   0.0           REV 01   SFF-8472 ver 9.3

root>

Original Message:
Sent: 08-20-2024 12:14
From: EMTSU
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

*Xcvr 9 is the working SFP in my setup.

I have 2 differences in my port config. i.e. I don't have flow control configured and I am employing vlan-tagging, just FYI.

Original Message:
Sent: 08-19-2024 19:51
From: ChrisLee
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Hi EMTSU - if you wouldn't mind sharing some details below (show system information, show system firmware, show chassis hardware) would be great - feel free to completely redact the serial numbers or just the first couple of characters. 

I've just realised all our SRX345's that I've had this issue with have serials starting DS21, so unless it's something super specific to this series. I've noticed I've got varying BIOS versions across different units depending on the JunOS they are currently running. 

Below is the details of the SRX345 that I'm currently testing with. I currently have a genuine Cisco in ge-0/0/8, a genuine Juniper in ge-0/0/9, and a FS.com Juniper coded 1000BaseLX module in ge-0/0/10

Thanks,
Chris

root> show system information
Model: srx345-dual-ac
Family: junos-es
Junos: 22.4R3-S2.11

root> show system firmware
Part             Type              Tag Current               Available             Status
                                       version               version
Routing Engine 0 RE BIOS           0   3.12                  3.12                  OK
Routing Engine 0 RE BIOS Backup    1   3.12                  3.12                  OK

root> show chassis hardware
Hardware inventory:
Item             Version  Part number  Serial number     Description
Chassis                                DS21********      SRX345-DUAL-AC
Routing Engine   REV 08   650-077901   DS21********      RE-SRX345-DUAL-AC
FPC 0                     BUILTIN      BUILTIN           FPC
  PIC 0                                                  8xGE,8xGE SFP Base PIC
    Xcvr 8                NON-JNPR     FN*********       SFP-LX10
    Xcvr 9       REV 01   740-011614   N8*****           SFP-LX10
    Xcvr 10      REV 01   740-031850   F2*********       SFP-LX10
Power Supply 0
Power Supply 1

root>

Original Message:
Sent: 08-19-2024 19:27
From: EMTSU
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

In my working setup I have a genuine Juniper SFP in an SRX340 (essentially the same as the SRX345 i.e. the 340 can be 'upgraded' to a 345 by way of the appropriate license, believe it or not) and a genuine Cisco SFP in the 9200L. If I can help further in any way, do let me know, because I know how annoying this is!

Original Message:
Sent: 08-16-2024 08:58
From: EMTSU
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Don't get me started on this subject! I spent months doing the run around with this one. In the end, both devices needed a particular firmware and manual speed settings defined. I had the exact same issues and experiences as yourself. Currently, all is well, but as to 'who' is to blame, I can't answer that one. As you found, the SRX works fine with other kit, even Cisco, just not the 9200L specifically.  The Junos version required is 22.2R3-S3.18 (or above I presume).

Original Message:
Sent: 08-15-2024 19:54
From: ChrisLee
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Hi Steve,

Thanks we have defined speed 1g and link full-duplex already as well with no success, all the options set below.

When I went to look at the SRX yesterday I was surprised to see the LED's above the SFP were lit up, with activity light blinking - however JunOS still told me the link was in a down state. 

I then swapped around some optics in the SRX and took out the genuine SFP and inserted another Cisco GLC-LH-SM module and the link came up!

It still has me thoroughly confused however that the combination of Cisco GLC-LH SM module in a Cisco 3750 was working just fine with our existing optics, and then changing over to the Cisco 9200L resulted in it not working anymore, yet putting a Cisco module in the Juniper did get it to come up.

set interfaces ge-0/0/8 speed 1g
set interfaces ge-0/0/8 link-mode full-duplex
set interfaces ge-0/0/8 ether-options no-auto-negotiation
set interfaces ge-0/0/8 ether-options no-flow-control

Original Message:
Sent: 08-15-2024 19:33
From: spuluka
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

In these link speed configurations with Cisco in addition to setting no negotiate, we also had to explicitly configure speed 1g and duplex full for the link to come up.

------------------------------
Steve Puluka BSEET - Juniper Ambassador
IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP - Retired)
http://puluka.com/home

Original Message:
Sent: 08-14-2024 21:56
From: ChrisLee
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Hi All,

Does anyone have a working example of SRX345 using 1000Base-LX optics to Cisco 9200L switch with 1000Base-LX ? 

We have an issue with our SRX345 cluster where we had 2x 1000Base-LX interfaces towards a customer's 2x Cisco 3750 stack with Cisco 1000Base-LX optics. 

This configuration was working absolutely fine, until the customer replaced their switches with 2x Cisco C9200L-24T-4X running 17.09.04a  CAT9K_LITE_IOSXE

After reconnecting the optics, the customers Cisco SFP interfaces showed the link as UP on their side, however the SRX continues to see the interfaces as DOWN. 

Confirm we receive optical light power from the Cisco SFP, and if customer shuts down their SFP we see the optical light power drop off. Similarly if we shut our SFP, the customers SFP interface goes down, so it's not a patching issue, and keep in mind this exact link and patching was working fine, it was only an issue after the customer Cisco switches were replaced with newer model. 

Have been working through with JTAC and the suggestion from them was to ensure the customers Cisco interfaces have "speed nonegotiate" and "switchport nonegotiate" set which they do. We have similarly tried setting no-auto-negotiation on our SRX interfaces, and our side still refuses to come up, while the Cisco side is happily showing as UP and that they are sending bytes to us but not receiving any bytes back. 

I'm at a complete loss on this as to why we can't interface directly - I've tried different JunOS releases on the SRX with no difference. At the moment I have the main links back in production by sitting 2x EX2300-C-12P's in between each fibre link to act as an expensive managed SFP-to-SFP media converter, but it would be far more preferable to have the direct links working again so that the SRX345 cluster will failover between interfaces properly, as currently if the active interface were to fail between the Cisco and 2300-C the SRX on our side won't see that due to the 2300-C <-> SRX interface still being online. 

I currently have a testlab SRX345 using the Genuine Juniper SFP-1G-LX-C Part Number: 740-011614 optic towards the customers Cisco on a spare SFP port using a Genuine Cisco GLC-LH-SM 1000Base-LX optic. 

Does anyone know if there's any technical difference with the Device Specific Juniper optic "EX-SFP-1GE-LX Part Number: 740-011614 Small Form Factor Pluggable 1000Base-LX Gigabit Ethernet Optics" compared to the Common optic SFP-1G-LX-C Part Number: 740-011614 ?

Or whether there is some other optic that would be compatible, or could it genuinely be an issue with the Customer side optics in their switch as they are still using the original Cisco GLC-LH-SM modules which are quite old now.

Thanks

Hi @EMTSU 

Sorry to say I ended up giving up on this and have closed off my JTAC case as well. 

I was unable to get traction from the customer to participate in the troubleshooting by running any commands/settings that JTAC were requesting anyway making further troubleshooting impossible. 

I've chalked this up to just being some odd issue specific to the SRX340/345 series (maybe all 3xx branch series?) given that the exact same optics work when moving the SFP from the SRX into an EX2300.  So I'll continue to run these 2x links between a couple of EX2300-C's for the time being probably until we refresh the SRX's with whatever comes after them. 

Good luck and if you do get any success with this issue be it a Juniper or Cisco specific problem I'd be glad to hear it. 

Thanks

Chris

Original Message:
Sent: 10-10-2024 04:31
From: EMTSU-IT
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

@ChrisLee: how are you getting on with this issue? I'm still having intermittent issues with it.

Original Message:
Sent: 08-23-2024 05:25
From: EMTSU-IT
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

I have some additional information Chris, as follows:

Cisco Port Config.

interface GigabitEthernet1/1/4

switchport trunk native vlan 999

switchport trunk allowed vlan 900

switchport mode trunk

switchport nonegotiate

speed nonegotiate

no cdp enable

Cisco Software

Version 17.12.3 (this just happens to be the latest, the setup works with an older IOS version, but need to confirm that one).

Original Message:
Sent: 08-22-2024 05:07
From: EMTSU
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Original Message:
Sent: 08-21-2024 22:16
From: ChrisLee
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Thanks for that - also if I can trouble you for one more command which I couldn't remember the other day which will show a bit more of the SFP vendor details and versions...

root> show chassis pic fpc-slot 0 pic-slot 0
FPC slot 0, PIC slot 0 information:
  Type                             8xGE,8xGE SFP Base PIC
  State                            Online
  PIC version                      1.8
  Uptime                           56 days, 23 hours, 46 minutes, 15 seconds

PIC port information:
                         Fiber                    Xcvr vendor       Wave-                     Xcvr          JNPR     MSA
  Port Cable type        type  Xcvr vendor        part number       length                    Firmware      Rev      Version
  8    GIGE 1000LX10     SM    CISCO-FINISAR      FTLF1318P2BCL-CS  1310 nm                   0.0                    SFF-8472 ver n/a
  9    GIGE 1000LX10     SM    FINISAR CORP.      FTLF1318P3BTL-J1  1310 nm                   0.0           REV 01   SFF-8472 ver 9.3
  10   GIGE 1000LX10     SM    FS                 SFP1G-LX-31       1310 nm                   0.0           REV 01   SFF-8472 ver 9.3

root>

Original Message:
Sent: 08-20-2024 12:14
From: EMTSU
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

*Xcvr 9 is the working SFP in my setup.

I have 2 differences in my port config. i.e. I don't have flow control configured and I am employing vlan-tagging, just FYI.

Original Message:
Sent: 08-19-2024 19:51
From: ChrisLee
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Hi EMTSU - if you wouldn't mind sharing some details below (show system information, show system firmware, show chassis hardware) would be great - feel free to completely redact the serial numbers or just the first couple of characters. 

I've just realised all our SRX345's that I've had this issue with have serials starting DS21, so unless it's something super specific to this series. I've noticed I've got varying BIOS versions across different units depending on the JunOS they are currently running. 

Below is the details of the SRX345 that I'm currently testing with. I currently have a genuine Cisco in ge-0/0/8, a genuine Juniper in ge-0/0/9, and a FS.com Juniper coded 1000BaseLX module in ge-0/0/10

Thanks,
Chris

root> show system information
Model: srx345-dual-ac
Family: junos-es
Junos: 22.4R3-S2.11

root> show system firmware
Part             Type              Tag Current               Available             Status
                                       version               version
Routing Engine 0 RE BIOS           0   3.12                  3.12                  OK
Routing Engine 0 RE BIOS Backup    1   3.12                  3.12                  OK

root> show chassis hardware
Hardware inventory:
Item             Version  Part number  Serial number     Description
Chassis                                DS21********      SRX345-DUAL-AC
Routing Engine   REV 08   650-077901   DS21********      RE-SRX345-DUAL-AC
FPC 0                     BUILTIN      BUILTIN           FPC
  PIC 0                                                  8xGE,8xGE SFP Base PIC
    Xcvr 8                NON-JNPR     FN*********       SFP-LX10
    Xcvr 9       REV 01   740-011614   N8*****           SFP-LX10
    Xcvr 10      REV 01   740-031850   F2*********       SFP-LX10
Power Supply 0
Power Supply 1

root>

Original Message:
Sent: 08-19-2024 19:27
From: EMTSU
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

In my working setup I have a genuine Juniper SFP in an SRX340 (essentially the same as the SRX345 i.e. the 340 can be 'upgraded' to a 345 by way of the appropriate license, believe it or not) and a genuine Cisco SFP in the 9200L. If I can help further in any way, do let me know, because I know how annoying this is!

Original Message:
Sent: 08-16-2024 08:58
From: EMTSU
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Don't get me started on this subject! I spent months doing the run around with this one. In the end, both devices needed a particular firmware and manual speed settings defined. I had the exact same issues and experiences as yourself. Currently, all is well, but as to 'who' is to blame, I can't answer that one. As you found, the SRX works fine with other kit, even Cisco, just not the 9200L specifically.  The Junos version required is 22.2R3-S3.18 (or above I presume).

Original Message:
Sent: 08-15-2024 19:54
From: ChrisLee
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Hi Steve,

Thanks we have defined speed 1g and link full-duplex already as well with no success, all the options set below.

When I went to look at the SRX yesterday I was surprised to see the LED's above the SFP were lit up, with activity light blinking - however JunOS still told me the link was in a down state. 

I then swapped around some optics in the SRX and took out the genuine SFP and inserted another Cisco GLC-LH-SM module and the link came up!

It still has me thoroughly confused however that the combination of Cisco GLC-LH SM module in a Cisco 3750 was working just fine with our existing optics, and then changing over to the Cisco 9200L resulted in it not working anymore, yet putting a Cisco module in the Juniper did get it to come up.

set interfaces ge-0/0/8 speed 1g
set interfaces ge-0/0/8 link-mode full-duplex
set interfaces ge-0/0/8 ether-options no-auto-negotiation
set interfaces ge-0/0/8 ether-options no-flow-control

Original Message:
Sent: 08-15-2024 19:33
From: spuluka
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

In these link speed configurations with Cisco in addition to setting no negotiate, we also had to explicitly configure speed 1g and duplex full for the link to come up.

------------------------------
Steve Puluka BSEET - Juniper Ambassador
IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP - Retired)
http://puluka.com/home

Original Message:
Sent: 08-14-2024 21:56
From: ChrisLee
Subject: SRX345 1000Base-LX Optic compatibility to Cisco 9200L

Hi All,

Does anyone have a working example of SRX345 using 1000Base-LX optics to Cisco 9200L switch with 1000Base-LX ? 

We have an issue with our SRX345 cluster where we had 2x 1000Base-LX interfaces towards a customer's 2x Cisco 3750 stack with Cisco 1000Base-LX optics. 

This configuration was working absolutely fine, until the customer replaced their switches with 2x Cisco C9200L-24T-4X running 17.09.04a  CAT9K_LITE_IOSXE

After reconnecting the optics, the customers Cisco SFP interfaces showed the link as UP on their side, however the SRX continues to see the interfaces as DOWN. 

Confirm we receive optical light power from the Cisco SFP, and if customer shuts down their SFP we see the optical light power drop off. Similarly if we shut our SFP, the customers SFP interface goes down, so it's not a patching issue, and keep in mind this exact link and patching was working fine, it was only an issue after the customer Cisco switches were replaced with newer model. 

Have been working through with JTAC and the suggestion from them was to ensure the customers Cisco interfaces have "speed nonegotiate" and "switchport nonegotiate" set which they do. We have similarly tried setting no-auto-negotiation on our SRX interfaces, and our side still refuses to come up, while the Cisco side is happily showing as UP and that they are sending bytes to us but not receiving any bytes back. 

I'm at a complete loss on this as to why we can't interface directly - I've tried different JunOS releases on the SRX with no difference. At the moment I have the main links back in production by sitting 2x EX2300-C-12P's in between each fibre link to act as an expensive managed SFP-to-SFP media converter, but it would be far more preferable to have the direct links working again so that the SRX345 cluster will failover between interfaces properly, as currently if the active interface were to fail between the Cisco and 2300-C the SRX on our side won't see that due to the 2300-C <-> SRX interface still being online. 

I currently have a testlab SRX345 using the Genuine Juniper SFP-1G-LX-C Part Number: 740-011614 optic towards the customers Cisco on a spare SFP port using a Genuine Cisco GLC-LH-SM 1000Base-LX optic. 

Does anyone know if there's any technical difference with the Device Specific Juniper optic "EX-SFP-1GE-LX Part Number: 740-011614 Small Form Factor Pluggable 1000Base-LX Gigabit Ethernet Optics" compared to the Common optic SFP-1G-LX-C Part Number: 740-011614 ?

Or whether there is some other optic that would be compatible, or could it genuinely be an issue with the Customer side optics in their switch as they are still using the original Cisco GLC-LH-SM modules which are quite old now.

Thanks

Hi All,

Does anyone have a working example of SRX345 using 1000Base-LX optics to Cisco 9200L switch with 1000Base-LX ? 

We have an issue with our SRX345 cluster where we had 2x 1000Base-LX interfaces towards a customer's 2x Cisco 3750 stack with Cisco 1000Base-LX optics. 

This configuration was working absolutely fine, until the customer replaced their switches with 2x Cisco C9200L-24T-4X running 17.09.04a  CAT9K_LITE_IOSXE

After reconnecting the optics, the customers Cisco SFP interfaces showed the link as UP on their side, however the SRX continues to see the interfaces as DOWN. 

Confirm we receive optical light power from the Cisco SFP, and if customer shuts down their SFP we see the optical light power drop off. Similarly if we shut our SFP, the customers SFP interface goes down, so it's not a patching issue, and keep in mind this exact link and patching was working fine, it was only an issue after the customer Cisco switches were replaced with newer model. 

Have been working through with JTAC and the suggestion from them was to ensure the customers Cisco interfaces have "speed nonegotiate" and "switchport nonegotiate" set which they do. We have similarly tried setting no-auto-negotiation on our SRX interfaces, and our side still refuses to come up, while the Cisco side is happily showing as UP and that they are sending bytes to us but not receiving any bytes back. 

I'm at a complete loss on this as to why we can't interface directly - I've tried different JunOS releases on the SRX with no difference. At the moment I have the main links back in production by sitting 2x EX2300-C-12P's in between each fibre link to act as an expensive managed SFP-to-SFP media converter, but it would be far more preferable to have the direct links working again so that the SRX345 cluster will failover between interfaces properly, as currently if the active interface were to fail between the Cisco and 2300-C the SRX on our side won't see that due to the 2300-C <-> SRX interface still being online. 

I currently have a testlab SRX345 using the Genuine Juniper SFP-1G-LX-C Part Number: 740-011614 optic towards the customers Cisco on a spare SFP port using a Genuine Cisco GLC-LH-SM 1000Base-LX optic. 

Does anyone know if there's any technical difference with the Device Specific Juniper optic "EX-SFP-1GE-LX Part Number: 740-011614 Small Form Factor Pluggable 1000Base-LX Gigabit Ethernet Optics" compared to the Common optic SFP-1G-LX-C Part Number: 740-011614 ?

Or whether there is some other optic that would be compatible, or could it genuinely be an issue with the Customer side optics in their switch as they are still using the original Cisco GLC-LH-SM modules which are quite old now.

Thanks

Besides the hard code 1g and duplex,  run the >show interface diagnostics optics, and see what type of power your getting from the interface.

Assuming you are running single-mode fiber and not some 50m runs.  Also, does your syslog show any SFP type alarms?  

Here's an Internet LX on a SRX345, all alarms and warnings are default.  

>show interfaces diagnostics optics 
Physical interface: ge-0/0/15
    Laser bias current                        :  15.206 mA
    Laser output power                        :  0.2230 mW / -6.52 dBm
    Module temperature                        :  35 degrees C / 96 degrees F
    Module voltage                            :  3.2980 V
    Laser receiver power                      :  0.2282 mW / -6.42 dBm
    Laser bias current high alarm             :  Off
    Laser bias current low alarm              :  Off
    Laser bias current high warning           :  Off
    Laser bias current low warning            :  Off
    Laser output power high alarm             :  Off
    Laser output power low alarm              :  Off
    Laser output power high warning           :  Off
    Laser output power low warning            :  Off
    Module temperature high alarm             :  Off
    Module temperature low alarm              :  Off
    Module temperature high warning           :  Off
    Module temperature low warning            :  Off
    Module voltage high alarm                 :  Off
    Module voltage low alarm                  :  Off
    Module voltage high warning               :  Off
    Module voltage low warning                :  Off
    Laser rx power high alarm                 :  Off
    Laser rx power low alarm                  :  Off
    Laser rx power high warning               :  Off
    Laser rx power low warning                :  Off
    Laser bias current high alarm threshold   :  45.000 mA
    Laser bias current low alarm threshold    :  0.000 mA
    Laser bias current high warning threshold :  40.000 mA
    Laser bias current low warning threshold  :  0.400 mA
    Laser output power high alarm threshold   :  0.7940 mW / -1.00 dBm
    Laser output power low alarm threshold    :  0.0700 mW / -11.55 dBm
    Laser output power high warning threshold :  0.6310 mW / -2.00 dBm
    Laser output power low warning threshold  :  0.0890 mW / -10.51 dBm
    Module temperature high alarm threshold   :  90 degrees C / 194 degrees F
    Module temperature low alarm threshold    :  -45 degrees C / -49 degrees F
    Module temperature high warning threshold :  85 degrees C / 185 degrees F
    Module temperature low warning threshold  :  -40 degrees C / -40 degrees F
    Module voltage high alarm threshold       :  3.700 V
    Module voltage low alarm threshold        :  2.900 V
    Module voltage high warning threshold     :  3.630 V
    Module voltage low warning threshold      :  2.970 V
    Laser rx power high alarm threshold       :  0.5010 mW / -3.00 dBm
    Laser rx power low alarm threshold        :  0.0063 mW / -22.01 dBm
    Laser rx power high warning threshold     :  0.3980 mW / -4.00 dBm
    Laser rx power low warning threshold      :  0.0080 mW / -20.97 dBm

Hi All,

Does anyone have a working example of SRX345 using 1000Base-LX optics to Cisco 9200L switch with 1000Base-LX ? 

We have an issue with our SRX345 cluster where we had 2x 1000Base-LX interfaces towards a customer's 2x Cisco 3750 stack with Cisco 1000Base-LX optics. 

This configuration was working absolutely fine, until the customer replaced their switches with 2x Cisco C9200L-24T-4X running 17.09.04a  CAT9K_LITE_IOSXE

After reconnecting the optics, the customers Cisco SFP interfaces showed the link as UP on their side, however the SRX continues to see the interfaces as DOWN. 

Confirm we receive optical light power from the Cisco SFP, and if customer shuts down their SFP we see the optical light power drop off. Similarly if we shut our SFP, the customers SFP interface goes down, so it's not a patching issue, and keep in mind this exact link and patching was working fine, it was only an issue after the customer Cisco switches were replaced with newer model. 

Have been working through with JTAC and the suggestion from them was to ensure the customers Cisco interfaces have "speed nonegotiate" and "switchport nonegotiate" set which they do. We have similarly tried setting no-auto-negotiation on our SRX interfaces, and our side still refuses to come up, while the Cisco side is happily showing as UP and that they are sending bytes to us but not receiving any bytes back. 

I'm at a complete loss on this as to why we can't interface directly - I've tried different JunOS releases on the SRX with no difference. At the moment I have the main links back in production by sitting 2x EX2300-C-12P's in between each fibre link to act as an expensive managed SFP-to-SFP media converter, but it would be far more preferable to have the direct links working again so that the SRX345 cluster will failover between interfaces properly, as currently if the active interface were to fail between the Cisco and 2300-C the SRX on our side won't see that due to the 2300-C <-> SRX interface still being online. 

I currently have a testlab SRX345 using the Genuine Juniper SFP-1G-LX-C Part Number: 740-011614 optic towards the customers Cisco on a spare SFP port using a Genuine Cisco GLC-LH-SM 1000Base-LX optic. 

Does anyone know if there's any technical difference with the Device Specific Juniper optic "EX-SFP-1GE-LX Part Number: 740-011614 Small Form Factor Pluggable 1000Base-LX Gigabit Ethernet Optics" compared to the Common optic SFP-1G-LX-C Part Number: 740-011614 ?

Or whether there is some other optic that would be compatible, or could it genuinely be an issue with the Customer side optics in their switch as they are still using the original Cisco GLC-LH-SM modules which are quite old now.

Thanks